Worst still, users are then signed up to expensive subscription services without their permission. In fact, the whole process takes place in an invisible window with the ‘Subscribe’ button tapped automatically.
Perhaps the most serious part of the attack is that it can also let total strangers read and intercept personal chats sent via the popular service.
Speaking about the discovery, Igor Golovin, security expert at Kaspersky, said: “With this app, it is hard for users to recognize the potential threat because the mod application actually does what is proposed – it adds additional features. However, we have observed how cybercriminals have started to spread malicious files through the ad blocks in such apps.
“That is why we recommend you only use messenger software downloaded from official app stores. They may lack some additional functions, but they will not install a bunch of malware on your smartphone.”
Credit: Source link